Skip to content
OpenAdvisories

Package · npm

slpjs

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2020-15130

    False-positive validity for NFT1 genesis transactions in SLPJS

    In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child…

    simpleledger slpjs slpjs npm
  • High 8.6
    CVE-2020-11071

    False-negative validation results in MINT transactions with invalid baton

    SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would resul…

    simpleledger slpjs slpjs npm
  • Medium 5.7
    CVE-2019-16762

    Validator parsing discrepancy due to string encoding in NPM slpjs

    A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP con…

    simpleledger slpjs slpjs npm